Kubernetes native delete protection using Validation Admission Policies

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

In Kubernetes 1.30 Validation Admission Policies became stable and generally available. Validation Admission Policies are a lightweight, built-in policy engine for the Kubernetes API server, that allows to use the “Common Expression Language” (CEL) to express policies for single objects and warn, log or deny them. To play around with this new feature, I decided to implement a simple feature, that…

Read on shivering-isles.com ↗